Privacy Policy

Last updated: October 2026

Who We Are

This website is operated by Jenny Tate, Mortgage Agent Level 1 (FSRA licence #M22002086), operating under Tango Financial Mortgage (ON) Corporation (FSRA #13691). When we say "we" or "us" in this policy, we mean Jenny Tate in her capacity as a licensed mortgage agent in Ontario. This site is operated in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What Data We Collect and How

We collect personal information in a few specific ways:

Why We Collect It

Who Processes Your Data

These third-party processors handle personal data collected through this site:

The host of Mortgage Tools by Jenny is named in its own section below.

Data Retention

Cookies

Google Analytics uses analytics cookies to track usage patterns. These are not advertising or remarketing cookies. Calendly may set cookies when the booking widget loads on the page. No advertising or marketing cookies are used on this site.

On the home page, the glossary, the Mortgage Tools page and the four calculator pages (renewal, payment, debt consolidation and reverse mortgage), a cookie notice asks you to accept or decline analytics. Unless you accept, this site tells Google Analytics that analytics cookies are denied. Your choice is saved in your browser. You can also use the Google Analytics opt-out browser add-on at any time.

Cross-Border Data Transfers

Data collected through this site may be processed in the United States by Netlify, Google, and Calendly. These companies operate under standard contractual protections and recognized compliance frameworks. By submitting your information, you acknowledge this transfer.

Mortgage Tools by Jenny in AI Assistants

Mortgage Tools by Jenny is a set of six Canadian mortgage tools (calculators and short preparation guides) that an AI assistant, such as ChatGPT or Claude, can call when you ask it a mortgage question. It is published by Jenny Tate, Mortgage Agent Level 1, Tango Financial Mortgage (ON) Corporation, Brokerage Licence #13691, and it is a separate service from this website. The page that describes it, jenny.mortgage/mortgage-tools/, is part of this website, so the rest of this policy applies to visits to that page. This section covers the service the assistant calls.

What the service receives. When the assistant calls a tool, it sends the service the details needed for that one calculation. These are mortgage figures such as a balance, interest rate, amortization, term, payment, fees and a lender-quoted penalty. For a debt consolidation comparison they include the balances, rates and payments of other debts, such as credit cards, car loans and lines of credit. It can also include a monthly repayment budget, your prepayment limits and, if you give it, the value of the property. The assistant also sends any dates you gave, a short text label for each offer, cost, credit and debt (up to 100 characters), and a note of up to 240 characters when a figure is an assumption. The service uses these once, to compute the result it returns to the assistant.

The tools do not ask for your name, contact details, home address, Social Insurance Number, banking details, or a credit report or credit score. Labels and notes are free text, so please do not type any of those into them.

The network address. Like any internet service, the service sees the network address (IP address) a request arrives from. Requests reach it through the assistant provider's network. Anthropic states that Claude's tool calls go out from Anthropic's infrastructure rather than from the user's device. OpenAI describes ChatGPT's requests to connected services as traffic from an OpenAI-operated network and publishes the address ranges. When you use an assistant such as ChatGPT or Claude, the request is sent from the provider's network, not from your device. If an assistant connects straight from your own device, the address is the one your device connects from. OpenAI's documentation also says ChatGPT can add technical details to a tool call: an anonymized user identifier, anonymized conversation and organization identifiers, a language setting, an app or browser hint, and an approximate location (city, region, country, time zone and coordinates). Other assistants may add similar details. The service does not ask for these details and does not use or keep them.

What is held in memory, and for how long. The figures, labels, notes and the result are held in memory only while the request is handled. The service cuts off a request that is not answered within five seconds, and its calculation workers keep nothing from one call to the next.

To limit abuse, the service keeps two tables of network addresses in memory. For an IPv6 address it keeps only the first half (the /64 prefix), not the full address. The first table holds, for each address, a request count and the time its 15-minute window ends. An expired entry is removed when a later request arrives, so on a quiet service an entry can stay past 15 minutes, until the next request or until the service restarts. The second table holds, for each address, the amount of data the service has sent to that address during the current day, counted in Coordinated Universal Time (UTC). It is emptied by the first request that arrives after 00:00 UTC, so an address can stay in it for a day, or longer on a quiet service. The tables are used only to count requests and data sent and to refuse an address that passes a limit. They hold nothing about what a request contained. A restart empties both tables. Each holds at most 10,000 addresses, and when one is full its oldest entry is dropped. While a request is being handled, the service also counts how many requests from the same address are in progress. The service also keeps one running total in memory, the size of all responses sent that day, which says nothing about any request or caller.

What is written down. The service has no database. It writes no figures, labels, notes or network addresses to storage or to its logs. In normal running it writes a start-up line and a line of counters, at a set interval when something has changed and when the service stops. The counters are the number of requests that ended in each outcome, for each tool and for requests that were refused before reaching a tool, the number of tool calls in each of four duration bands, the number of worker restarts, the total size of the responses sent that day with the two daily limits it is held to (one for the whole service and one for a single address), and the time counting began. They contain no figures, labels, network addresses, URLs or headers.

Where it runs. The service runs on Fly.io, in its Toronto region. Fly.io's network receives each request and passes it to the service, so Fly.io handles the request and its network address in transit. Fly.io's documentation says its log search keeps an application's output for seven days. For this service that output is the start-up line and the counter lines described above. Fly.io's logging documentation does not say how long Fly.io keeps its own network records, so we cannot state that period.

What the service does not collect or do. The service has no account or sign-in, and does not collect an email address or other contact details. It does not save or share a scenario, send an email, book a meeting, or pass anything to Jenny Tate or to a lender as a lead. The section "We Do Not Sell Your Data" below applies to this service as well.

Your conversation. Your conversation, including the figures you type and the results shown, is held by the provider of the AI assistant you use, under that provider's own terms and privacy policy. We do not control what that provider keeps.

Questions and requests. The service keeps no record of your figures, so there is nothing stored for us to look up, correct or delete. For a question about this service, or to make a request under PIPEDA, email info@jenny.mortgage with the subject line "Privacy Request."

Your Rights Under PIPEDA

As a Canadian resident, you have the right under PIPEDA to:

To exercise these rights, email info@jenny.mortgage with the subject line "Privacy Request." We will respond within 30 days.

We Do Not Sell Your Data

We do not sell, rent, or share your personal information with third parties for commercial or marketing purposes. Your information is never passed to data brokers or advertising networks.

Contact for Privacy Questions

For all privacy questions, data requests, and accessibility inquiries, contact Jenny Tate directly: